Plcnext Engineer
Approved changes feed: RSS · Atom
cpe:2.3:a:phoenixcontact:plcnext_engineer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265) |
|---|---|
| Product | Plcnext Engineer (963604c1-841a-5cfa-a0a7-bd959406ed86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46144 |
vulnerable | 2026-06-08 06:12:44.024708 |
PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
MEDIUM (6.5)
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Published: 2023-12-14T14:08:07.244Z
Updated: 2024-10-01T06:18:18.730Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46142 |
vulnerable | 2026-06-08 06:12:44.015942 |
PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
HIGH (8.8)
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Published: 2023-12-14T14:05:35.741Z
Updated: 2024-08-02T20:37:39.840Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3935 |
vulnerable | 2026-06-08 06:09:40.834206 |
Wibu: Buffer Overflow in CodeMeter Runtime
CRITICAL (9.8)
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.
Published: 2023-09-13T13:19:18.392Z
Updated: 2025-08-27T20:32:53.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12499 |
vulnerable | 2026-06-08 05:17:58.304101 |
PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.
HIGH (8.2)
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.
Published: 2020-07-21T15:09:40.065Z
Updated: 2024-09-17T03:18:07.103Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.